Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa
File: myM_0rlBYmLZEdH2vDPyd5jD26Y.roa (raw, json)
Hash identifier: 9Y+T42ieMCNODWNdOLkhQzkvd4Q7LWgv6npTlyWeRfQ=
Subject key identifier: 9B:23:3F:D2:B9:41:62:62:D9:11:D1:F6:BC:33:F2:77:98:C3:DB:A6
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 05DFAE4D
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa
Signing time: Sat 01 Jan 2022 10:54:41 +0000
ROA not before: Sat 01 Jan 2022 10:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207404
IP address blocks: 194.127.208.0/22 maxlen: 24
2001:678:c48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98545229 (0x5dfae4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Jan 1 10:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b233fd2b9416262d911d1f6bc33f27798c3dba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:6f:1f:7b:78:9d:33:6b:09:52:5e:cd:ce:
bf:f2:4c:3d:d2:d1:c6:5f:44:5d:62:6e:e0:02:fe:
81:3d:f3:73:5d:86:77:65:4b:45:cf:ae:50:86:95:
13:59:8e:f2:b3:01:7a:ed:88:15:be:d6:19:43:e2:
7a:52:a8:db:90:81:ba:e2:81:75:0c:ce:26:30:38:
19:a2:0d:96:96:14:3f:a3:12:fc:2c:db:26:2d:21:
fa:9d:92:62:4a:38:a3:8f:fb:9a:31:89:d1:a0:bb:
16:33:9a:5c:3a:d6:ff:ee:bd:2f:9b:ab:8d:68:53:
9c:1a:9b:54:1d:72:55:57:bb:5d:30:e8:e2:28:62:
9e:0a:ac:74:63:ae:ed:2b:a3:ed:59:9e:d5:31:7a:
25:ba:56:7e:21:33:9f:a4:34:e1:39:e9:bd:3c:75:
ae:c6:2e:e5:f7:2f:3f:3b:ed:03:eb:e9:52:c2:9c:
4a:34:89:79:31:16:d5:40:5d:6d:76:df:78:46:a9:
86:ce:8a:81:b8:3c:ea:a9:41:a8:26:c6:dd:52:4e:
51:19:8f:7a:d4:23:71:52:ef:69:30:98:21:d2:6e:
21:09:d9:af:ec:27:d4:35:5d:dd:f7:71:c9:23:c5:
f7:5d:12:16:88:91:78:85:1b:5b:7d:3d:b4:fb:19:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:3F:D2:B9:41:62:62:D9:11:D1:F6:BC:33:F2:77:98:C3:DB:A6
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.208.0/22
IPv6:
2001:678:c48::/48
Signature Algorithm: sha256WithRSAEncryption
7f:44:f2:a2:49:31:db:3e:db:13:b2:54:4b:2b:e2:f5:73:62:
e8:1f:c5:16:2d:87:6c:45:df:05:b4:b1:c4:e9:96:c3:98:d0:
35:df:f6:a6:2b:6e:f3:b0:b6:87:e2:be:ab:49:2b:0d:c0:39:
32:45:6b:cf:d9:9c:40:7d:23:ea:80:0f:75:95:33:df:48:7e:
6e:dc:8f:63:57:9c:4e:0c:c0:c1:57:90:55:26:37:38:6f:bd:
ec:87:a5:1d:0d:b3:9b:3c:37:cf:7c:47:99:52:39:03:df:b3:
a3:2b:9a:1f:24:1b:04:de:4b:80:3c:6e:09:1b:ac:93:9f:3e:
7f:cc:16:67:1c:6e:73:50:6b:37:9c:41:d2:f6:db:46:0d:12:
4c:45:cb:b6:3b:ed:f4:01:d8:3c:2e:c1:7e:28:53:b3:83:d0:
7d:cf:01:01:f6:4d:a3:7b:94:5a:71:32:2b:fc:2d:b7:81:da:
e2:e3:c7:5c:93:60:84:19:93:c4:17:4c:d9:52:2d:98:a3:34:
d8:5c:c3:2b:d8:ab:93:50:73:6a:8d:80:c1:7e:ba:63:0f:88:
a8:82:98:a5:9c:ed:4c:6b:ee:1b:3e:6a:88:5d:1f:65:76:95:
f4:fb:dc:6e:33:1f:c0:35:c0:49:af:08:64:ab:ab:3d:8f:ef:
c6:d1:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:12 2025 by rpki-client